am: e3291403

* commit 'e3291403':
  healthd: grant perms from domain_deprecated

am: 07ae9d5d

* commit '07ae9d5d':
  remove access_kmsg macro, because it to be more explicit.

am: f33507df

* commit 'f33507df':
  healthd: grant perms from domain_deprecated

am: fea9ad7c

* commit 'fea9ad7c':
  remove access_kmsg macro, because it to be more explicit.

am: fde8ca53

* commit 'fde8ca53':
  zygote: grant perms from domain_deprecated

am: eecaa0b5

* commit 'eecaa0b5':
  zygote: grant perms from domain_deprecated

In preparation of removing permissions from domain_deprecated.

Addresses:
avc: denied { read } for name="present" dev="sysfs" ino=5003 scontext=u:r:healthd:s0 tcontext=u:object_r:sysfs:s0 tclass=file
avc: denied { open } for path="/sys/devices/platform/htc_battery_max17050.8/power_supply/flounder-battery/present" dev="sysfs" ino=5003 scontext=u:r:healthd:s0 tcontext=u:object_r:sysfs:s0 tclass=file

Change-Id: Iaee5b79a45aedad98e08c670addbf444c984165e

In preparation of removing permissions from domain_deprecated.

Addresses:
avc: denied { read } for name="ipv6_route" dev="proc" ino=4026536875 scontext=u:r:zygote:s0 tcontext=u:object_r:proc_net:s0 tclass=file
avc: denied { open } for path="/proc/220/net/ipv6_route" dev="proc" ino=4026536875 scontext=u:r:zygote:s0 tcontext=u:object_r:proc_net:s0 tclass=file
avc: denied { getattr } for path="/proc/220/net/ipv6_route" dev="proc" ino=4026536875 scontext=u:r:zygote:s0 tcontext=u:object_r:proc_net:s0 tclass=file

Change-Id: Ie94d3db3c5dccb8077ef5da26221a6413f5d19c2

am: 555f14c2

* commit '555f14c2':
  Allow sdcardd tmpfs read access.

am: db559a34

* commit 'db559a34':
  Allow sdcardd tmpfs read access.

am: 7d3e5467

* commit '7d3e5467':
  Revert "zygote: grant perms from domain_deprecated"

am: 98f60e5c

* commit '98f60e5c':
  Revert "zygote: grant perms from domain_deprecated"

Address the following denial:
type=1400 audit(1453854842.899:7): avc: denied { search } for pid=1512 comm="sdcard" name="/" dev="tmpfs" ino=7547 scontext=u:r:sdcardd:s0 tcontext=u:object_r:tmpfs:s0 tclass=dir permissive=0

vold: EmulatedVolume calls sdcard to mount on /storage/emulated.

Bug: 26807309
Change-Id: Ifdd7c356589f95165bba489dd06282a4087e9aee

This reverts commit e52fff83.

Change-Id: Ieafb5214940585d63ff6f0b4802d8c7d1c126174

This reverts commit e52fff83.

Change-Id: Ieafb5214940585d63ff6f0b4802d8c7d1c126174

am: 299e1d5a

* commit '299e1d5a':
  zygote: grant perms from domain_deprecated

am: 4115beae

* commit '4115beae':
  zygote: grant perms from domain_deprecated

In preparation of removing permissions from domain_deprecated.

Addresses:
avc: denied { read } for name="ipv6_route" dev="proc" ino=4026536875 scontext=u:r:zygote:s0 tcontext=u:object_r:proc_net:s0 tclass=file
avc: denied { open } for path="/proc/220/net/ipv6_route" dev="proc" ino=4026536875 scontext=u:r:zygote:s0 tcontext=u:object_r:proc_net:s0 tclass=file
avc: denied { getattr } for path="/proc/220/net/ipv6_route" dev="proc" ino=4026536875 scontext=u:r:zygote:s0 tcontext=u:object_r:proc_net:s0 tclass=file

Change-Id: I5b505ad386a445113bc0a1bb35d4f88f7761c048

Remove from autoplay

Change-Id: Ic9f019f69e5f2dff5e2b8d03d39052486660d791

am: 2e975396

* commit '2e975396':
  Revert "Remove domain_deprecated from sdcard domains"

am: c4121add

* commit 'c4121add':
  Revert "Remove domain_deprecated from sdcard domains"

This reverts commit 0c7bc58e.

bug: 26807309

Change-Id: I8a7b0e56a0d6f723508d0fddceffdff76eb0459a

am: 7676d3d9

* commit '7676d3d9':
  domain: grant write perms to cgroups

am: be0616ba

* commit 'be0616ba':
  domain: grant write perms to cgroups

Was moved to domain_deprecated. Move back to domain.

Files in /acct/uid/*/tasks are well protected by unix permissions.
No information is leaked with write perms.

Change-Id: I8017e906950cba41ce350bc0892a36269ade8d53

am: a321dde8

* commit 'a321dde8':
  Restore untrusted_app proc_net access.

am: 5833e3f5

* commit '5833e3f5':
  Restore untrusted_app proc_net access.

Address the following denial:
type=1400 audit(0.0:853): avc: denied { read } for name="/" dev="proc" ino=1 scontext=u:r:untrusted_app:s0:c512,c768 tcontext=u:object_r:proc:s0 tclass=dir permissive=0

Bug: 26806629
Change-Id: Ic2ad91aadac00dc04d7e04f7460d5681d81134f4

This macro does not give us anything to it.

Change-Id: Ie0b56716cc0144f0a59849647cad31e06a25acf1

am: fa46a737

* commit 'fa46a737':
  Using r_dir_file macro in domain.te

am: 093ea6fb

* commit '093ea6fb':
  Using r_dir_file macro in domain.te